Release date:
2026-09-17 09:11:26 UTC
Description:
* SECURITY UPDATE: quadratic parse time in the tarfile module when a
streaming archive declares an offset past the end of the stream
- debian/patches/CVE-2026-11972.patch: stop the forward-seek loop in
_Stream.seek() as soon as read() returns no data, in Lib/tarfile.py,
so a crafted mode="r|" archive can no longer keep the parser reading
an exhausted stream.
- CVE-2026-11972
* SECURITY UPDATE: out-of-bounds write when a bz2 decompressor is reused
after a decompression error
- debian/patches/CVE-2026-9669.patch: record the libbzip2 error in the
BZ2Decompressor object and refuse any further decompress() call with
ValueError, in Modules/_bz2module.c, so retrying with the same object
can no longer re-enter BZ2_bzDecompress() on a bz_stream left in an
invalid internal state.
- CVE-2026-9669
Updated packages:
-
idle-python3.5_3.5.2-2ubuntu0~16.04.13+tuxcare.els30_all.deb
sha:ed9667458598898c910e8175584612a79aec5eb8
-
libpython3.5_3.5.2-2ubuntu0~16.04.13+tuxcare.els30_amd64.deb
sha:c0cda0139862cf976206d30be03937312077c8e2
-
libpython3.5-dev_3.5.2-2ubuntu0~16.04.13+tuxcare.els30_amd64.deb
sha:c2c2afc0f36fffe42ffb29d23072f389cd86b20a
-
libpython3.5-minimal_3.5.2-2ubuntu0~16.04.13+tuxcare.els30_amd64.deb
sha:9d77cbd6c4e648eba0be8ff26aab06dc37349093
-
libpython3.5-stdlib_3.5.2-2ubuntu0~16.04.13+tuxcare.els30_amd64.deb
sha:494a68a66759899ab9527cd117fea66ccfca2422
-
libpython3.5-testsuite_3.5.2-2ubuntu0~16.04.13+tuxcare.els30_all.deb
sha:ab07c525dc180bb71563f08f46f948ebec427e62
-
python3.5_3.5.2-2ubuntu0~16.04.13+tuxcare.els30_amd64.deb
sha:5ab2f4300c45f3fda8da702f566cca753ba89118
-
python3.5-dev_3.5.2-2ubuntu0~16.04.13+tuxcare.els30_amd64.deb
sha:caac93ad051a8c18eddf536cb320410018be88b2
-
python3.5-doc_3.5.2-2ubuntu0~16.04.13+tuxcare.els30_all.deb
sha:756541eeeb45c06da8404badf20e3a6f2c931b78
-
python3.5-examples_3.5.2-2ubuntu0~16.04.13+tuxcare.els30_all.deb
sha:dc01129a319dee1cecd600760b20fbe9834e3cbe
-
python3.5-minimal_3.5.2-2ubuntu0~16.04.13+tuxcare.els30_amd64.deb
sha:01a5056fa6333b0876ad21328b55d0d51b26e7a9
-
python3.5-venv_3.5.2-2ubuntu0~16.04.13+tuxcare.els30_amd64.deb
sha:d58ad77c2a63667a2727d4cf00778503103a7571
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
